From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 9 Feb 2013 12:21:58 +0000 (+0100)
Subject: Do not call the certificate verification callback if certificates are ignored.
X-Git-Tag: gnutls_3_1_8~13
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5a7f08063f0c41cf1227769e4775f77f0270b2b2;p=thirdparty%2Fgnutls.git

Do not call the certificate verification callback if certificates are ignored.
---

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 4be633881f..5bc7d70815 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2497,7 +2497,8 @@ static int run_verify_callback(gnutls_session_t session, unsigned int side)
   if (type != GNUTLS_CRD_CERTIFICATE)
     return 0;
 
-  if (cred != NULL && cred->verify_callback != NULL)
+  if (cred != NULL && cred->verify_callback != NULL && 
+  	session->internals.send_cert_req != GNUTLS_CERT_IGNORE)
     {
       ret = cred->verify_callback (session);
       if (ret < -1)